370 Passwords You Shouldn’t (And Can’t) Use On Twitter

If you’re on Twitter, that means you registered an account with a password that isn’t terribly easy to guess. As you may know, Twitter prevents people from doing just that by indicating that certain passwords such as ‘password’ (cough cough) and ‘123456′ are too obvious to be picked.

It just so happens that Twitter has hard-coded all banned passwords on the sign-up page. All you need to do to retrieve the full list of unwelcome passwords is take a look at the source code of that page.

Do a simple search for ‘twttr.BANNED_PASSWORDS’ and voilà, there they are, all 370 of them.

This isn’t a security issue, of course, and in fact it’s helpful to distribute the list so you can check if your favorite password that you use for other services might not be as fail-proof as you’d like to think. For the full list, simply download this TXT file, but here are a couple:

- password

- testing

- naked

- stupid

- twitter

- 123456

- secret

- please

- beavis

- butthead

- internet

- hooters

What would be interesting to know is if Twitter got this list from somewhere else, or if they actually analyze which passwords were most commonly chosen by its tens of millions of users in the past, rendering them ‘too obvious’. If the latter, that means this list is probably representative of most Web services.

(Thanks to Dario Manoukian for the tip; a quick search turns up a post on The Wundercounter featuring the list too)

Crunch Network: CrunchBase the free database of technology companies, people, and investors

View full post on TechCrunch

Tags: 123456, account, all, can’t, cough, cough cough, crunch, free database, Google, hooters, isn, List, Look, manoukian, motorala 370 opening password com, page, password, Passwords, post, proxy, Q, Search, security issue, Shouldn’t, simple search, technology companies, Twitter, twitter.banned_passwords, twttr.banned password, twttr.banned passwords, twttr.banned passwords’, twttr.banned_password, twttr.banned_passwords, twttr.banned_passwords’, Web, what email account is used for google chrome login, wundercounter, www, ‘twttr.banned passwords, ‘twttr.banned passwords’, ‘twttr.banned_passwords, ‘twttr.banned_passwords’, “twttr.banned passwords, “twttr.banned_passwords”